Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/D8FBD076F81311EF989FC47B762E951A.roa
File: D8FBD076F81311EF989FC47B762E951A.roa (raw, json)
Hash identifier: 5ZM7FZdyHJ3h1kABK4Wd0X2vl/nK0g1+cnj1dsOe5qI=
Subject key identifier: C7:15:9D:77:DB:58:15:F7:49:5C:1F:16:B6:21:80:B2:7C:91:50:89
Certificate issuer: /CN=F36CC035AF/serialNumber=E3B07BB9D0957749FFE48C7E7325A9E11B416AB9
Certificate serial: 0369
Authority key identifier: E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/D8FBD076F81311EF989FC47B762E951A.roa
Signing time: Mon 03 Mar 2025 09:42:40 +0000
ROA not before: Mon 03 Mar 2025 09:42:36 +0000
ROA not after: Sat 31 Mar 2035 09:42:36 +0000
asID: 198949
IP address blocks: 105.232.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.mft
rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 02:16:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 873 (0x369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CC035AF
Validity
Not Before: Mar 3 09:42:36 2025 GMT
Not After : Mar 31 09:42:36 2035 GMT
Subject: CN=67c57990-1592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:05:82:b2:1d:13:17:b3:b4:11:74:23:4d:
e3:78:13:42:a7:d9:02:cc:e2:83:81:2e:b3:91:16:
4a:a7:1f:36:2b:54:8a:90:20:8e:67:3b:7d:e1:aa:
dd:5b:34:a9:6a:b7:bf:2b:98:6d:50:2e:da:7a:89:
18:fd:a0:0c:2c:8e:28:c5:df:eb:8b:d4:1d:5e:6e:
81:4a:23:da:6f:5c:bc:ec:15:9d:f3:7d:dd:2b:88:
b0:6e:b0:98:d9:06:58:26:53:e9:ce:ff:4f:8e:c0:
b7:35:d0:51:8f:f8:e0:31:38:c6:4e:a5:c1:20:34:
a1:4e:00:e7:99:5b:72:a0:50:86:52:c4:80:ab:4f:
20:83:e6:33:ba:76:25:3f:a8:66:a3:64:b2:05:6f:
f7:3c:6e:2e:87:3b:69:0a:c0:3d:58:c6:8e:0b:a5:
b4:96:77:c3:52:e8:64:92:90:81:e4:ae:28:c3:bf:
28:a2:99:c6:49:b6:5c:bb:92:9f:75:5d:5d:6e:19:
16:82:84:3d:ff:6c:93:79:6a:38:b6:fa:dd:59:6a:
06:63:81:6a:ec:15:0f:7c:08:d3:77:5a:fc:a3:de:
f1:09:39:2f:c3:2a:6c:6c:8f:ee:a0:e3:89:04:18:
d5:07:35:36:69:e1:0b:e9:a6:c2:4d:a5:86:e5:97:
bd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:15:9D:77:DB:58:15:F7:49:5C:1F:16:B6:21:80:B2:7C:91:50:89
X509v3 Authority Key Identifier:
keyid:E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/D8FBD076F81311EF989FC47B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.232.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:1c:98:77:da:ce:1c:09:b2:e1:ad:3b:76:9b:e8:b0:08:45:
97:36:b7:05:98:9d:7d:b4:20:65:70:49:f9:d7:fe:4c:21:51:
dc:f0:0d:1a:bd:07:83:e2:3d:67:ee:36:ba:27:46:3e:1a:22:
a2:88:31:93:f4:24:2e:df:d6:27:de:07:4c:6b:b8:02:37:c8:
8e:94:77:b5:a9:6b:15:a2:23:a2:13:a2:a2:50:f8:38:6d:ef:
25:ed:f3:ab:cc:da:61:93:c6:98:c1:32:f2:9c:d7:5a:df:fc:
9e:19:c1:48:33:1e:47:41:cb:56:61:48:d2:da:3b:d5:05:75:
37:ae:6c:84:6c:58:07:27:b2:ea:19:0e:d4:d9:79:6c:d1:bb:
db:f5:15:e7:e9:39:ba:5a:95:1c:f3:47:a4:ad:ce:7e:09:81:
e6:1d:35:a8:69:83:37:e2:a8:54:01:a2:1b:9b:5d:b4:c9:c0:
bf:f0:f8:27:a4:13:4e:da:6a:ab:10:25:db:ba:07:6b:d0:49:
41:32:55:82:3d:28:a0:17:9d:08:67:a4:cb:2a:9a:74:18:bc:
ae:4c:b1:0e:dc:69:6a:44:75:3d:b4:57:b3:9e:e5:99:5d:d9:
6a:bb:dc:b1:d9:78:45:9e:1f:22:9b:9b:48:10:92:af:73:7a:
1e:dd:61:a9
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICA2kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0MwMzVBRjExMC8GA1UEBRMoRTNCMDdCQjlEMDk1Nzc0OUZGRTQ4QzdFNzMyNUE5
RTExQjQxNkFCOTAeFw0yNTAzMDMwOTQyMzZaFw0zNTAzMzEwOTQyMzZaMBgxFjAU
BgNVBAMTDTY3YzU3OTkwLTE1OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCydAWCsh0TF7O0EXQjTeN4E0Kn2QLM4oOBLrORFkqnHzYrVIqQII5nO33h
qt1bNKlqt78rmG1QLtp6iRj9oAwsjijF3+uL1B1eboFKI9pvXLzsFZ3zfd0riLBu
sJjZBlgmU+nO/0+OwLc10FGP+OAxOMZOpcEgNKFOAOeZW3KgUIZSxICrTyCD5jO6
diU/qGajZLIFb/c8bi6HO2kKwD1Yxo4LpbSWd8NS6GSSkIHkrijDvyiimcZJtly7
kp91XV1uGRaChD3/bJN5aji2+t1ZagZjgWrsFQ98CNN3Wvyj3vEJOS/DKmxsj+6g
44kEGNUHNTZp4QvppsJNpYbll72RAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUxxWd
d9tYFfdJXB8WtiGAsnyRUIkwHwYDVR0jBBgwFoAU47B7udCVd0n/5Ix+cyWp4RtB
arkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNDMDM1LzcxRjY5OTY4NzE1ODExRUQ4QjE5MzM5RkYxMjIyNDY4LzQ3Qjd1
ZENWZDBuXzVJeC1jeVdwNFJ0QmFyay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzQ3Qjd1ZENWZDBuXzVJeC1jeVdwNFJ0QmFyay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkNDMDM1LzcxRjY5OTY4NzE1ODExRUQ4QjE5MzM5RkYx
MjIyNDY4L0Q4RkJEMDc2RjgxMzExRUY5ODlGQzQ3Qjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwBp6DANBgkqhkiG9w0BAQsF
AAOCAQEAgByYd9rOHAmy4a07dpvosAhFlza3BZidfbQgZXBJ+df+TCFR3PANGr0H
g+I9Z+42uidGPhoioogxk/QkLt/WJ94HTGu4AjfIjpR3talrFaIjohOiolD4OG3v
Je3zq8zaYZPGmMEy8pzXWt/8nhnBSDMeR0HLVmFI0to71QV1N65shGxYByey6hkO
1Nl5bNG72/UV5+k5ulqVHPNHpK3OfgmB5h01qGmDN+KoVAGiG5tdtMnAv/D4J6QT
TtpqqxAl27oHa9BJQTJVgj0ooBedCGekyyqadBi8rkyxDtxpakR1PbRXs57lmV3Z
arvcsdl4RZ4fIpubSBCSr3N6Ht1hqQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:53:07 2025 by rpki-client